agent-inspect 6.31.3 → 6.31.5

package/packages/cli/dist/index.mjs

@@ -1,11 +1,12 @@
 #!/usr/bin/env node
-import { ATTRIBUTION_CONFIDENCES, createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, resolveBundleRunIds, getTraceFilePath, openTrace, sha256Hex, collectTraceSchemaVersions, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceHtmlShell, buildEvidenceProvenanceViewHtml, EVIDENCE_FORMAT_VERSION, inferEvidenceFileRole, buildEvidenceSafetyViewHtml, buildEvidenceDiffViewHtml, buildEvidenceCircuitViewHtml, buildEvidenceOutcomesViewHtml, buildEvidenceContractsViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceCausalFailureViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceTreeViewHtml, buildEvidenceManifest, serializeEvidenceManifest, buildZipArchive, assertBundlePathContained, enrichSessionRunRecord, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, runTraceChecks, assertEvidenceRelativePath, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, TraceReadError, resolveRedactionProfile, applyProfileMetadataCaps, Redactor, flattenTree, escapeHtml, safeString, compactAttributes, stableJson, escapeMarkdown, truncateStringForProfile, extractMetadata, filterTraces, truncateName, buildRunSummary, formatDuration, formatTimestamp, renderErrorLine, isAgentInspectTrace, defineTraceContract, filterMetasBySessionScope, evaluateTraceContract, aggregateSessionCheckResults, createBaselineRegressionRule, summarizeSemanticParity, buildEvidenceCiPackage, verifyEvidenceDirectory, diffTraceEvents, renderRunDiff, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, formatStepLabel, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, getIndent, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, projectLogicalEvents, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, isAttributionConfidence, diffRuns, manualTraceEventsToComparableRun } from './chunk-SJ6FRNOE.mjs';
+import { ATTRIBUTION_CONFIDENCES, createSafetyRawContentRule, createSafetyRedactionRule, createSafetySecretPatternRule, createSafetyOversizedAttributeRule, resolveTraceDir, parseDuration, buildSessionIndex, resolveBundleRunIds, getTraceFilePath, openTrace, sha256Hex, collectTraceSchemaVersions, aggregateBundleSafeStatus, bundleFailsOnSafety, bundleRunAssetRelativePath, buildPlaceholderArtifact, EVIDENCE_HTML_FILENAME, EVIDENCE_MANIFEST_FILENAME, buildBundleMetadata, buildBundleSummaryMarkdown, buildEvidenceHtmlShell, buildEvidenceProvenanceViewHtml, EVIDENCE_FORMAT_VERSION, inferEvidenceFileRole, buildEvidenceSafetyViewHtml, buildEvidenceDiffViewHtml, buildEvidenceCircuitViewHtml, buildEvidenceOutcomesViewHtml, buildEvidenceContractsViewHtml, buildEvidenceToolsLlmViewHtml, buildEvidenceCausalFailureViewHtml, buildEvidenceTimelineViewHtml, buildEvidenceTreeViewHtml, buildEvidenceManifest, serializeEvidenceManifest, buildZipArchive, assertBundlePathContained, enrichSessionRunRecord, normalizeBundleOutputPath, sanitizeBundleRunId, defaultBundleOutputPath, runTraceChecks, assertEvidenceRelativePath, TraceDirectory, loadTraceMetadataList, loadSessionRunRecords, TraceReadError, resolveRedactionProfile, applyProfileMetadataCaps, Redactor, flattenTree, escapeHtml, safeString, compactAttributes, stableJson, escapeMarkdown, DEFAULT_REDACT_KEYS, truncateStringForProfile, stringContainsHighConfidenceCredential, isCredentialSensitiveKey, extractMetadata, filterTraces, truncateName, buildRunSummary, formatDuration, formatTimestamp, renderErrorLine, isAgentInspectTrace, defineTraceContract, filterMetasBySessionScope, evaluateTraceContract, aggregateSessionCheckResults, createBaselineRegressionRule, summarizeSemanticParity, buildEvidenceCiPackage, verifyEvidenceDirectory, diffTraceEvents, renderRunDiff, buildRunTimeline, renderTimeline, buildTraceStats, renderTraceStats, parseDurationFilter, searchTraces, formatStepLabel, buildActivitySummary, renderActivitySummaryHuman, buildRunWhatSummary, renderRunWhat, buildLocalExplanation, resolveSuiteTemplate, defaultSuiteConfigTemplate, loadSuiteConfig, validateSuiteConfig, runSuite, renderSuiteReport, analyzeCohort, renderCohortReport, gateHasThresholds, runGate, renderGateReport, persistedInspectEventsToTraceEvents, renderStepLine, getIndent, TreeBuilder, zeroKinds, validateEvent, traceEventToPersistedInspectEvent, isPersistedInspectEvent, createRunStatusRule, createStructureOrphanRule, createStructureCycleRule, createRunDurationRule, createMaxStepDurationRule, createRequireCompletedRule, createStallDetectionRule, createObservedOutcomeRule, createRunDepthRule, createToolUsageRule, createLlmUsageRule, createStructureRelationshipRule, createStructureParallelWidthRule, projectLogicalEvents, summarizeObservedOutcomes, extractOutcomesFromTraceEvents, renderObservedOutcomesMarkdown, renderObservedOutcomesHtml, DEFAULT_SUITE_ARTIFACTS_DIR, parseCohortMetricList, COHORT_METRIC_IDS, parseGateList, nanoid, isAttributionConfidence, diffRuns, manualTraceEventsToComparableRun } from './chunk-LKEPABND.mjs';
 import { realpathSync, constants as constants$1, existsSync, readFileSync } from 'fs';
 import path19 from 'path';
 import { fileURLToPath, pathToFileURL } from 'url';
 import { Command, Option } from 'commander';
 import { readFile, stat, mkdir, writeFile, unlink, appendFile, access, rm, open, readdir, lstat, constants } from 'fs/promises';
 import process2, { stdin, stdout } from 'process';
+import { StringDecoder } from 'string_decoder';
 import crypto, { createHash } from 'crypto';
 import { execFile, spawn } from 'child_process';
 import { promisify } from 'util';
@@ -13,7 +14,7 @@ import { createServer } from 'http';
 import { createRequire } from 'module';
 
 // package.json
-var version = "6.31.3";
+var version = "6.31.5";
 
 // packages/cli/src/trace-dir-scale.ts
 var TRACE_COUNT_WARN = 1e3;
@@ -1576,6 +1577,7 @@ async function followFile(filePath, options, onLine, shouldStop) {
     await readFileOnce(filePath, onLine);
     return;
   }
+  let decoder = new StringDecoder("utf-8");
   pos = st.size;
   while (!shouldStop()) {
     let next;
@@ -1589,6 +1591,7 @@ async function followFile(filePath, options, onLine, shouldStop) {
       pos = 0;
       carry = "";
       lineNumber = 0;
+      decoder = new StringDecoder("utf-8");
     }
     if (next.size > pos) {
       const fh = await open(filePath, "r");
@@ -1597,7 +1600,7 @@ async function followFile(filePath, options, onLine, shouldStop) {
         const buf = Buffer.allocUnsafe(Number(len));
         const { bytesRead } = await fh.read(buf, 0, buf.length, pos);
         pos += bytesRead;
-        const chunk = carry + buf.toString("utf-8", 0, bytesRead);
+        const chunk = carry + decoder.write(buf.subarray(0, bytesRead));
         const parts = chunk.split(/\r?\n/);
         carry = parts.pop() ?? "";
         for (const p of parts) {
@@ -1757,6 +1760,124 @@ async function tail(options = {}) {
 // packages/core/src/exporters/types.ts
 var EXPORT_PAYLOAD_VERSION = "0.1.2";
 
+// packages/core/src/safety/url-redaction.ts
+var HTTP_URL = /^https?:\/\/[^\s]+$/i;
+var CONNECTION_PROTOCOLS = /* @__PURE__ */ new Set([
+  "postgres:",
+  "postgresql:",
+  "mysql:",
+  "mariadb:",
+  "mongodb:",
+  "mongodb+srv:",
+  "redis:",
+  "rediss:",
+  "amqp:",
+  "amqps:"
+]);
+var CONNECTION_URI = /^(?:postgres|postgresql|mysql|mariadb|mongodb(?:\+srv)?|rediss?|amqps?):\/\/[^\s]+$/i;
+var UUID_SEGMENT = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var HEX_SEGMENT = /^[0-9a-f]{12,}$/i;
+var NUMERIC_SEGMENT = /^\d{5,}$/;
+var OPAQUE_SEGMENT = /^[A-Za-z0-9_-]{20,}$/;
+function looksLikeHttpUrl(value) {
+  return HTTP_URL.test(value.trim());
+}
+function looksLikeConnectionUri(value) {
+  return CONNECTION_URI.test(value.trim());
+}
+function looksLikeUrlForRedaction(value) {
+  return looksLikeHttpUrl(value) || looksLikeConnectionUri(value);
+}
+function parseRedactableUrl(value) {
+  try {
+    const url = new URL(value.trim());
+    if (url.protocol === "http:" || url.protocol === "https:") return url;
+    if (CONNECTION_PROTOCOLS.has(url.protocol)) return url;
+    return void 0;
+  } catch {
+    return void 0;
+  }
+}
+function isHttpProtocol(protocol) {
+  return protocol === "http:" || protocol === "https:";
+}
+function isIdentifierSegment(segment) {
+  if (UUID_SEGMENT.test(segment)) return true;
+  if (HEX_SEGMENT.test(segment)) return true;
+  if (NUMERIC_SEGMENT.test(segment)) return true;
+  return OPAQUE_SEGMENT.test(segment) && /\d/.test(segment) && /[A-Za-z]/.test(segment);
+}
+function decodeParam(value) {
+  try {
+    return decodeURIComponent(value.replace(/\+/g, " "));
+  } catch {
+    return value;
+  }
+}
+function redactParams(raw, options, replacement) {
+  let redacted = false;
+  const parts = raw.split("&").map((part) => {
+    if (part.length === 0) return part;
+    const separator = part.indexOf("=");
+    if (separator < 0) return part;
+    const rawKey = part.slice(0, separator);
+    const rawValue = part.slice(separator + 1);
+    const key = decodeParam(rawKey);
+    const value = decodeParam(rawValue);
+    if (isCredentialSensitiveKey(key, options.sensitiveKeys) || options.isSensitiveValue(value)) {
+      redacted = true;
+      return `${rawKey}=${replacement}`;
+    }
+    return part;
+  });
+  return { value: parts.join("&"), redacted };
+}
+function redactUrlString(value, options) {
+  const unchanged = {
+    value,
+    credentialRedacted: false,
+    identifiersMasked: false
+  };
+  if (!looksLikeUrlForRedaction(value)) return unchanged;
+  const url = parseRedactableUrl(value);
+  if (!url) return unchanged;
+  const replacement = options.replacement ?? "[REDACTED]";
+  const idPlaceholder = options.idPlaceholder ?? "[id]";
+  const http = isHttpProtocol(url.protocol);
+  let credentialRedacted = url.username.length > 0 || url.password.length > 0;
+  let identifiersMasked = false;
+  let pathname = url.pathname;
+  if (http && options.maskPathIds === true) {
+    pathname = url.pathname.split("/").map((segment) => {
+      if (segment.length === 0 || !isIdentifierSegment(decodeParam(segment))) {
+        return segment;
+      }
+      identifiersMasked = true;
+      return idPlaceholder;
+    }).join("/");
+  }
+  let search = "";
+  if (url.search.length > 1) {
+    const params = redactParams(url.search.slice(1), options, replacement);
+    if (params.redacted) credentialRedacted = true;
+    search = `?${params.value}`;
+  } else if (url.search.length === 1) {
+    search = "?";
+  }
+  let hash = url.hash;
+  if (url.hash.includes("=")) {
+    const params = redactParams(url.hash.slice(1), options, replacement);
+    if (params.redacted) credentialRedacted = true;
+    hash = `#${params.value}`;
+  }
+  if (!credentialRedacted && !identifiersMasked) return unchanged;
+  return {
+    value: `${url.protocol}//${url.host}${pathname}${search}${hash}`,
+    credentialRedacted,
+    identifiersMasked
+  };
+}
+
 // packages/core/src/exporters/redact-export.ts
 function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -1774,21 +1895,34 @@ function deepClone(value) {
   }
   return out;
 }
-function boundAttributeValues(record, maxMetadataValueLength, maxPreviewLength, seen, depth) {
+function boundAttributeValues(record, sensitiveKeys, maxMetadataValueLength, maxPreviewLength, seen, depth) {
   if (depth > 32) {
     return { truncated: true, reason: "maxDepth" };
   }
   const out = {};
   for (const [key, value] of Object.entries(record)) {
-    out[key] = boundValue(value, key, maxMetadataValueLength, maxPreviewLength, seen, depth);
+    out[key] = boundValue(
+      value,
+      key,
+      sensitiveKeys,
+      maxMetadataValueLength,
+      maxPreviewLength,
+      seen,
+      depth
+    );
   }
   return out;
 }
-function boundValue(value, key, maxMetadataValueLength, maxPreviewLength, seen, depth) {
+function boundValue(value, key, sensitiveKeys, maxMetadataValueLength, maxPreviewLength, seen, depth) {
   if (value === null || typeof value !== "object") {
     if (typeof value === "string") {
+      const rewritten = redactUrlString(value, {
+        sensitiveKeys,
+        isSensitiveValue: stringContainsHighConfidenceCredential,
+        maskPathIds: true
+      }).value;
       return truncateStringForProfile(
-        value,
+        stringContainsHighConfidenceCredential(rewritten) ? "[REDACTED]" : rewritten,
         key,
         maxMetadataValueLength,
         maxPreviewLength
@@ -1803,6 +1937,7 @@ function boundValue(value, key, maxMetadataValueLength, maxPreviewLength, seen,
       (item, index) => boundValue(
         item,
         String(index),
+        sensitiveKeys,
         maxMetadataValueLength,
         maxPreviewLength,
         seen,
@@ -1812,6 +1947,7 @@ function boundValue(value, key, maxMetadataValueLength, maxPreviewLength, seen,
   }
   return boundAttributeValues(
     value,
+    sensitiveKeys,
     maxMetadataValueLength,
     maxPreviewLength,
     seen,
@@ -1826,6 +1962,7 @@ function redactEventAttributes(attrs, redactor, maxMetadataValueLength, maxPrevi
   const seen = /* @__PURE__ */ new WeakSet();
   const bounded = boundAttributeValues(
     redacted,
+    [...DEFAULT_REDACT_KEYS, ...redactor.sensitiveKeys],
     maxMetadataValueLength,
     maxPreviewLength,
     seen,
@@ -3402,7 +3539,7 @@ async function newestTraceMtimeMs(traceDir) {
 }
 async function loadSessionRuns(traceDir) {
   try {
-    const mod = await import('./src-YNEJOPRA.mjs');
+    const mod = await import('./src-4WYF5RFI.mjs');
     const dbPath = mod.resolveIndexDbPath(traceDir);
     const status = mod.indexStatus(dbPath);
     if (!status.healthy) {
@@ -3904,7 +4041,7 @@ function isTokenCredentialKey(normalized) {
   if (normalized.endsWith("tokens")) return false;
   return normalized.endsWith("token");
 }
-function isCredentialSensitiveKey(key, sensitiveKeys) {
+function isCredentialSensitiveKey2(key, sensitiveKeys) {
   if (!key) return false;
   const normalized = normalizeSensitiveKey(key);
   if (!normalized) return false;
@@ -3925,7 +4062,7 @@ function isCredentialSensitiveKey(key, sensitiveKeys) {
 }
 
 // packages/redact/src/key-value-secret.ts
-var KEY_VALUE_SECRET_PATTERN_SOURCE = String.raw`\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=([^\s"'\\]{8,})`;
+var KEY_VALUE_SECRET_PATTERN_SOURCE = String.raw`\b(?:api[_-]?key|internal[_-]?token|access[_-]?token|auth[_-]?token|password|secret|token)=(?!\[(?:REDACTED(?::[^\]]*)?|HASH:[0-9a-f]{8})\](?![^\s"'\\&#?;/]))([^\s"'\\]{8,})`;
 var KEY_VALUE_SECRET_PATTERN = new RegExp(
   KEY_VALUE_SECRET_PATTERN_SOURCE,
   "i"
@@ -3935,6 +4072,124 @@ function valueContainsKeyValueSecret(value) {
   return KEY_VALUE_SECRET_PATTERN.test(value);
 }
 
+// packages/redact/src/url-redaction.ts
+var HTTP_URL2 = /^https?:\/\/[^\s]+$/i;
+var CONNECTION_PROTOCOLS2 = /* @__PURE__ */ new Set([
+  "postgres:",
+  "postgresql:",
+  "mysql:",
+  "mariadb:",
+  "mongodb:",
+  "mongodb+srv:",
+  "redis:",
+  "rediss:",
+  "amqp:",
+  "amqps:"
+]);
+var CONNECTION_URI2 = /^(?:postgres|postgresql|mysql|mariadb|mongodb(?:\+srv)?|rediss?|amqps?):\/\/[^\s]+$/i;
+var UUID_SEGMENT2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var HEX_SEGMENT2 = /^[0-9a-f]{12,}$/i;
+var NUMERIC_SEGMENT2 = /^\d{5,}$/;
+var OPAQUE_SEGMENT2 = /^[A-Za-z0-9_-]{20,}$/;
+function looksLikeHttpUrl2(value) {
+  return HTTP_URL2.test(value.trim());
+}
+function looksLikeConnectionUri2(value) {
+  return CONNECTION_URI2.test(value.trim());
+}
+function looksLikeUrlForRedaction2(value) {
+  return looksLikeHttpUrl2(value) || looksLikeConnectionUri2(value);
+}
+function parseRedactableUrl2(value) {
+  try {
+    const url = new URL(value.trim());
+    if (url.protocol === "http:" || url.protocol === "https:") return url;
+    if (CONNECTION_PROTOCOLS2.has(url.protocol)) return url;
+    return void 0;
+  } catch {
+    return void 0;
+  }
+}
+function isHttpProtocol2(protocol) {
+  return protocol === "http:" || protocol === "https:";
+}
+function isIdentifierSegment2(segment) {
+  if (UUID_SEGMENT2.test(segment)) return true;
+  if (HEX_SEGMENT2.test(segment)) return true;
+  if (NUMERIC_SEGMENT2.test(segment)) return true;
+  return OPAQUE_SEGMENT2.test(segment) && /\d/.test(segment) && /[A-Za-z]/.test(segment);
+}
+function decodeParam2(value) {
+  try {
+    return decodeURIComponent(value.replace(/\+/g, " "));
+  } catch {
+    return value;
+  }
+}
+function redactParams2(raw, options, replacement) {
+  let redacted = false;
+  const parts = raw.split("&").map((part) => {
+    if (part.length === 0) return part;
+    const separator = part.indexOf("=");
+    if (separator < 0) return part;
+    const rawKey = part.slice(0, separator);
+    const rawValue = part.slice(separator + 1);
+    const key = decodeParam2(rawKey);
+    const value = decodeParam2(rawValue);
+    if (isCredentialSensitiveKey2(key, options.sensitiveKeys) || options.isSensitiveValue(value)) {
+      redacted = true;
+      return `${rawKey}=${replacement}`;
+    }
+    return part;
+  });
+  return { value: parts.join("&"), redacted };
+}
+function redactUrlString2(value, options) {
+  const unchanged = {
+    value,
+    credentialRedacted: false,
+    identifiersMasked: false
+  };
+  if (!looksLikeUrlForRedaction2(value)) return unchanged;
+  const url = parseRedactableUrl2(value);
+  if (!url) return unchanged;
+  const replacement = options.replacement ?? "[REDACTED]";
+  const idPlaceholder = options.idPlaceholder ?? "[id]";
+  const http = isHttpProtocol2(url.protocol);
+  let credentialRedacted = url.username.length > 0 || url.password.length > 0;
+  let identifiersMasked = false;
+  let pathname = url.pathname;
+  if (http && options.maskPathIds === true) {
+    pathname = url.pathname.split("/").map((segment) => {
+      if (segment.length === 0 || !isIdentifierSegment2(decodeParam2(segment))) {
+        return segment;
+      }
+      identifiersMasked = true;
+      return idPlaceholder;
+    }).join("/");
+  }
+  let search = "";
+  if (url.search.length > 1) {
+    const params = redactParams2(url.search.slice(1), options, replacement);
+    if (params.redacted) credentialRedacted = true;
+    search = `?${params.value}`;
+  } else if (url.search.length === 1) {
+    search = "?";
+  }
+  let hash = url.hash;
+  if (url.hash.includes("=")) {
+    const params = redactParams2(url.hash.slice(1), options, replacement);
+    if (params.redacted) credentialRedacted = true;
+    hash = `#${params.value}`;
+  }
+  if (!credentialRedacted && !identifiersMasked) return unchanged;
+  return {
+    value: `${url.protocol}//${url.host}${pathname}${search}${hash}`,
+    credentialRedacted,
+    identifiersMasked
+  };
+}
+
 // packages/redact/src/index.ts
 var DEFAULT_REDACT_KEYS2 = [
   "authorization",
@@ -4001,7 +4256,9 @@ function findCompiledKeyRule(key, rules) {
   const exact = toKey(key);
   const direct = rules.find((candidate) => candidate.key === exact);
   if (direct) return direct;
-  return rules.find((candidate) => isCredentialSensitiveKey(key, [candidate.key]));
+  return rules.find(
+    (candidate) => isCredentialSensitiveKey2(key, [candidate.raw ?? candidate.key])
+  );
 }
 function stableHash(value) {
   const hash = crypto.createHash("sha256").update(value, "utf8").digest("hex");
@@ -4200,7 +4457,7 @@ function compileRules(rules, extraKeys) {
   const out = /* @__PURE__ */ new Map();
   const set = (rule) => {
     const key = toKey(rule.key);
-    out.set(key, { ...rule, key });
+    out.set(key, { ...rule, key, raw: rule.raw ?? rule.key });
   };
   for (const key of DEFAULT_REDACT_KEYS2) {
     set({ key, strategy: "full" });
@@ -4279,6 +4536,7 @@ function createRedactionProfile(profile = "local") {
 }
 var Redactor2 = class {
   #rules;
+  #sensitiveKeys;
   #detectors;
   #profile;
   #replacement;
@@ -4291,6 +4549,7 @@ var Redactor2 = class {
       ...resolved.extraKeys,
       ...options?.extraKeys ?? []
     ]);
+    this.#sensitiveKeys = this.#rules.map((rule) => rule.raw ?? rule.key);
     this.#detectors = [
       ...builtInDetectorsForProfile(this.#profile),
       ...options?.detectors ?? []
@@ -4324,6 +4583,14 @@ var Redactor2 = class {
   #recordFinding(state, finding) {
     if (this.#collectFindings) state.findings.push(finding);
   }
+  #detect(value, key, path30) {
+    for (const detector of this.#detectors) {
+      for (const detection of detector.detect({ path: path30, key, value })) {
+        if ((detection.action ?? "replace") !== "keep") return { detector, detection };
+      }
+    }
+    return void 0;
+  }
   #redactValue(value, key, path30, depth, state) {
     if (depth > this.#maxDepth) {
       this.#recordFinding(
@@ -4342,6 +4609,43 @@ var Redactor2 = class {
         return applyRule(rule, value, this.#replacement);
       }
     }
+    if (typeof value === "string" && looksLikeUrlForRedaction2(value)) {
+      const url = redactUrlString2(value, {
+        sensitiveKeys: this.#sensitiveKeys,
+        isSensitiveValue: (candidate) => this.#detect(candidate, key, path30) !== void 0,
+        replacement: this.#replacement,
+        maskPathIds: this.#profile !== "local"
+      });
+      if (url.value !== value) {
+        this.#recordFinding(
+          state,
+          makeFinding(
+            path30,
+            url.credentialRedacted ? "value.urlCredential" : "value.urlIdentifier",
+            "replace",
+            "value",
+            url.credentialRedacted ? "error" : "warning"
+          )
+        );
+        const residual = this.#detect(
+          url.value.split(this.#replacement).join(""),
+          key,
+          path30
+        );
+        if (residual === void 0) return url.value;
+        this.#recordFinding(
+          state,
+          makeFinding(
+            path30,
+            residual.detector.id,
+            "replace",
+            residual.detection.matchKind ?? residual.detector.matchKind ?? "custom",
+            residual.detection.severity ?? residual.detector.severity ?? "warning"
+          )
+        );
+        return this.#replacement;
+      }
+    }
     for (const detector of this.#detectors) {
       const detections = detector.detect({ path: path30, key, value });
       for (const detection of detections) {
@@ -12320,7 +12624,7 @@ function envCheck(name, optional = true) {
 async function traceDirWritable(traceDir) {
   const resolved = path19.resolve(traceDir);
   try {
-    await mkdir(resolved, { recursive: true });
+    await mkdir(resolved, { recursive: true, mode: 448 });
     await access(resolved, constants.W_OK);
     return {
       id: "trace-dir-writable",
@@ -12338,6 +12642,44 @@ async function traceDirWritable(traceDir) {
     };
   }
 }
+async function traceDirPermissions(traceDir) {
+  const resolved = path19.resolve(traceDir);
+  if (process2.platform === "win32") {
+    return {
+      id: "trace-dir-permissions",
+      status: "skipped",
+      message: "POSIX confidentiality mode check skipped on Windows.",
+      evidence: resolved
+    };
+  }
+  try {
+    const st = await stat(resolved);
+    const mode = st.mode & 511;
+    const octal = mode.toString(8).padStart(3, "0");
+    if ((mode & 63) !== 0) {
+      return {
+        id: "trace-dir-permissions",
+        status: "warn",
+        message: `Trace directory allows group/other access (mode ${octal}): ${resolved}`,
+        remediation: `Restrict with chmod 700 on the directory and review existing JSONL files with chmod 600. AgentInspect does not rewrite existing modes. See ${DOCS_BASE}/GETTING-STARTED.md`,
+        evidence: `mode=${octal}`
+      };
+    }
+    return {
+      id: "trace-dir-permissions",
+      status: "pass",
+      message: `Trace directory mode is restrictive (${octal}): ${resolved}`,
+      evidence: `mode=${octal}`
+    };
+  } catch (error) {
+    return {
+      id: "trace-dir-permissions",
+      status: "skipped",
+      message: `Could not inspect trace directory permissions: ${resolved}`,
+      evidence: error instanceof Error ? error.message : String(error)
+    };
+  }
+}
 function readPackageVersionNearEntry(entryPath, packageName) {
   let dir = path19.dirname(path19.resolve(entryPath));
   const { root } = path19.parse(dir);
@@ -12469,6 +12811,7 @@ async function runDoctorChecks(options = {}) {
       evidence: version
     },
     await traceDirWritable(traceDir),
+    await traceDirPermissions(traceDir),
     envCheck("AGENT_INSPECT"),
     envCheck("AGENT_INSPECT_TRACE_DIR"),
     versionMismatchCheck(cwd)
@@ -12996,7 +13339,7 @@ function isModuleNotFound4(e) {
 }
 async function loadIndexSqlite() {
   try {
-    return await import('./src-YNEJOPRA.mjs');
+    return await import('./src-4WYF5RFI.mjs');
   } catch (e) {
     if (isModuleNotFound4(e)) {
       console.error(